Red Hat Security AdvisoryRHSA-2026:0492
postgresql:15 security update
Released 2026-01-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.aarch64::postgresql:15, pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.ppc64le::postgresql:15, pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.s390x::postgresql:15 +47
Fixes 2 records
Priority LOW 26
Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00364 · Published 2025-11-13 · Partial fix · 18.1, 17.7 +4 CWE-190
Priority LOW 15
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema.
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2025-11-13 · Partial fix · 18.1, 17.7 +4 CWE-862
